microsoft-graph Azure AD signIns预览日志修改

Question

我尝试为我们所有的azure账户运行登录报告，我转到Azure AD -> Sign-Ins -> download，下载PowerShell脚本并成功获取数据。然而，它生成了太多的细节。URL = https://graph.microsoft.com/beta/auditLogs/signIns？

我运行了过去的7天，并产生了超过1亿txt数据，我只是寻找所有用户的signIns报告与id和createdDateTime只。

如何更改导出数据？我是这个图形浏览器的新手，如果你有任何想法和建议，请让我知道，谢谢。

{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#auditLogs/signIns",
    "value": [
        {
            "id": "",
            "createdDateTime": "2018-11-20T00:12:09.3961159Z",
            "userDisplayName": "",
            "userPrincipalName": ".com",
            "userId": "",
            "appId": "",
            "appDisplayName": "Graph explorer",
            "ipAddress": "",
            "clientAppUsed": "Browser",
            "mfaDetail": null,
            "correlationId": "",
            "conditionalAccessStatus": null,
            "originalRequestId": null,
            "isInteractive": true,
            "tokenIssuerName": null,
            "tokenIssuerType": "AzureAD",
            "processingTimeInMilliseconds": 0,
            "riskDetail": "hidden",
            "riskLevelAggregated": "hidden",
            "riskLevelDuringSignIn": "hidden",
            "riskState": "none",
            "riskEventTypes": [],
            "resourceDisplayName": "microsoft graph",
            "resourceId": "00000003-0000-0000-c000-000000000000",
            "authenticationMethodsUsed": [],

}

​

​

Answer 1

我只想为id和createdDateTime的所有用户寻找signIns报告

在微软的Graph Api中，query $select=id,createdDateTime可以做你想要的，但是signIns不支持select，其他的supported query不能做这件事。

​